Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/89c562b8-1ff3-47cb-a104-ad1da28b42d7.roa
File: 89c562b8-1ff3-47cb-a104-ad1da28b42d7.roa (raw, json)
Hash identifier: WG13lur8TzRk42r0QXy/2k3sGhNnFop2rYej/BTycp8=
Subject key identifier: 0D:81:B4:77:FB:39:D3:E0:C3:A9:67:B8:99:2A:D2:CE:FC:E9:60:A4
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 0462C20496D3E74EB18B5F289B3AAD9451C0C706
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/89c562b8-1ff3-47cb-a104-ad1da28b42d7.roa
Signing time: Mon 26 May 2025 15:11:08 +0000
ROA not before: Mon 26 May 2025 15:11:08 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:7880::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:62:c2:04:96:d3:e7:4e:b1:8b:5f:28:9b:3a:ad:94:51:c0:c7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:11:08 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=2b3d6bf713c2416b94a9a2eb26fbc733f37930c6689ffb60aabaaf27406dd436, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:a0:3b:e6:c6:57:a2:8b:6d:52:ee:73:b0:
1e:ab:46:db:91:10:49:3a:f9:20:70:51:ee:30:f2:
25:1c:f9:d2:1d:14:ec:a1:35:64:9b:95:e9:a5:f0:
f2:20:f9:e4:86:6a:76:d4:38:50:e2:fd:dd:f4:a3:
82:ca:5a:43:f2:70:32:8f:f8:18:c9:9d:e0:cc:fd:
9a:66:9c:88:c3:61:63:64:6f:38:47:17:58:23:16:
9d:22:ee:b5:39:68:fb:4d:61:ef:79:3a:0b:2a:ab:
8d:45:3f:58:57:d3:b6:4f:c0:99:cd:f6:a7:88:3f:
64:18:db:b0:96:6b:e3:ae:4d:c1:12:18:cc:b6:42:
61:f4:40:89:a5:0e:82:15:35:c1:0a:8c:27:6f:1a:
1f:31:38:91:5d:2b:f8:7b:0b:35:c0:4f:dd:c8:27:
55:9a:af:6e:c0:6f:47:a1:07:fb:fb:cb:77:7a:60:
b1:9d:e7:8c:8b:e6:65:7f:16:1a:d2:a3:fd:93:3a:
8a:6a:c7:1e:2c:40:07:04:40:78:eb:9d:71:64:f4:
9f:6d:b1:da:a6:c4:93:da:fe:f4:a9:c8:33:08:43:
b8:99:fa:17:80:90:3a:f6:f1:d6:26:d4:5c:c1:d7:
48:95:fa:10:99:a4:db:0e:8b:f6:95:c6:25:9e:79:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:81:B4:77:FB:39:D3:E0:C3:A9:67:B8:99:2A:D2:CE:FC:E9:60:A4
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/89c562b8-1ff3-47cb-a104-ad1da28b42d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:7880::/46
Signature Algorithm: sha256WithRSAEncryption
21:ce:1c:74:1e:2c:43:71:82:e4:16:a4:21:89:ba:d4:3f:da:
2f:c6:20:39:0b:a0:54:26:24:7e:48:98:d7:31:a3:3e:b5:3c:
be:4a:82:d8:ff:cb:68:2e:c6:3c:d9:36:ec:18:c4:bc:1c:a1:
6d:68:25:94:e8:f5:14:49:66:87:87:8f:3f:4f:16:e1:46:92:
4c:47:1c:31:09:f6:1c:90:08:f6:ab:ad:17:39:22:26:d0:1b:
d6:85:a4:c4:a2:b9:0f:33:33:1b:40:73:6c:56:a1:64:37:18:
1c:a8:84:43:95:e5:43:b3:80:cd:dd:cc:f7:d5:27:72:42:fc:
fc:d2:39:53:54:cc:82:db:89:dc:e3:53:d5:22:0f:26:3d:06:
a9:e8:b0:3d:59:4f:89:8e:f0:83:d6:cc:50:c5:cb:e7:97:dd:
a8:41:d7:27:0a:08:90:a1:ed:a7:7a:b5:1a:d6:8f:45:22:5b:
1e:ef:ee:21:78:3a:e3:6b:8d:ca:c5:29:79:1b:c6:77:ac:7f:
37:9d:dc:2d:73:f8:46:82:54:2a:f2:1c:96:74:77:92:9b:49:
49:24:c0:6b:3b:6d:55:06:f6:d8:d1:d7:75:f2:59:e8:df:c2:
57:ed:da:7b:5e:d0:cc:f7:b6:0a:12:c3:68:28:f4:50:7b:61:
2a:2d:79:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:46:33 2025 by rpki-client